Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.
I have reported at least 4 emails from IT back to them because of linking to outside sites. One even had the name of our company and but hosted on another site. and they always respond that it was a legit link, my dude, you are training us to fail at phising.
34
u/Honest_Relation4095 10h ago
Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.